Medium
CVE-2023-45268
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,456
Reset filters
Medium
CVE-2023-45274
SendPulse Free Web Push <= 1.3.1 - Cross-Site Request Forgery via sendpulse_config
Medium
CVE-2023-45107
GoodBarber <= 1.0.23 - Cross-Site Request Forgery via admin_options
Medium
CVE-2023-45267
IRivYou <= 2.2.1 - Cross-Site Request Forgery via saveOptionsReviewsPlugin
Medium
CVE-2023-45106
Urvanov Syntax Highlighter <= 2.8.33 - Cross-Site Request Forgery via init_ajax
Medium
CVE-2023-45108
Mailrelay <= 2.1.1 - Cross-Site Request Forgery via render_admin_page
Medium
CVE-2023-45102
Blog Manager Light <= 1.20 - Cross-Site Request Forgery via bml_settings
Medium
CVE-2023-45273
Stout Google Calendar <= 1.2.3 - Cross-Site Request Forgery via sgc_plugin_options
Medium
CVE-2023-45276
Automated Editor <= 1.3 - Cross-Site Request Forgery via admin menu pages
Medium
CVE-2023-45109
WhitePage <= 1.1.5 - Cross-Site Request Forgery via params_api_form.php
Low
CVE-2023-45105
affiliate-toolkit – WordPress Affiliate Plugin <= 3.3.9 - Open Redirect via atkpout.php
Medium
CVE-2023-45269
Simple SEO <= 2.0.25 - Cross-Site Request Forgery via multiple admin_post functions
Medium
CVE-2023-4797
Newsletter Lite <= 4.9.2 - Authenticated (Admin+) Command Injection
Medium
CVE-2023-1259
Hotjar <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-4469
Profile Extra Fields by BestWebSoft <= 1.2.7 - Missing Authorization to Sensitive Information Exposure
Medium
c5429fb1-7072-4a00-8fb3-48d4f876417f
Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization
Medium
CVE-2023-40002
Booster for WooCommerce <= 7.1.1 - Authenticated (Subscriber+) Information Disclosure via Shortcode
Medium
CVE-2023-51513
Geo Controller <= 8.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-45067
WP Simple HTML Sitemap <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-30870
Sharkdropship for AliExpress Dropship and Affiliate <= 2.2.4 - Missing Authorization
Medium
CVE-2023-45057
Hitsteps Web Analytics <= 5.86 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-45003
Social Feed <= 2.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-45006
WooODT Lite <= 2.4.6 - Reflected Cross-Site Scripting
High
CVE-2023-28748
Copy Or Move Comments <= 5.0.4 - Authenticated (Subscriber+) SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.